Forum Discussion

Nimbostratus

May 22, 2012

Big-IP ASM and websockets

Hi, I'm trying to let websockets (ws://) connections run through ASM, the backend application is based on socket.io/nodejs. It seems that connections are falling back to xhr-polling whic...

app sec

BIG-IP Access Policy Manager (APM)

security

Jorjjj

Nimbostratus

Jun 15, 2015

Hello,

I am using v11.6.0, VMware Virtual Edition

Is there any thing specific to configure to enable the WebSocket support over ASM?

Regards,

Georges

Hannes_Rapp
Nimbostratus
Jun 15, 2015
You will still need to use the workaround. Websockets support only covers LTM. Depending on what other iRules you use, the HTTP::disable and HTTP::enable functions might be eligible for removal (you'll have to test it for yourself). The ASM::disable & ASM::enable MyPolicyName are still required, and so is the iRule workaround. You can also use an LTM Policy (Local Traffic > Policy) for the purpose.
Jorjjj
Nimbostratus
Jun 15, 2015
Hello It worked well with the iRule! What is the difference between using iRule & LTM Policies in my Use Case?
Hannes_Rapp
Nimbostratus
Jun 15, 2015
LTM Policy is visually appealing and easier to understand, typically preferred by "jack-of-all-trades" network admins. Deeply specialized F5 engineers prefer to use iRules because they can be used to solve problems where LTM Policy is lacking in functionality. You can also use a combination of both, no ultimate right or wrong here - do what makes the most sense to you.
Jorjjj
Nimbostratus
Jun 15, 2015
I see! I will stick to iRules then, as it seems more flexible and have much more samples to troubleshoot! Regards, Georges